Seven rules out of the box: git push, deploys, public posts, sending messages, payments, deleting files, and protecting the gate itself. Ask mode by default, block mode if you want it strict. If anything breaks, it fails closed: the action is blocked, not let through.
I'm not a coder. I built this for my own one-person business on Claude, and it's the first thing I'd give anyone doing the same.